Medium (6.5) in cmsmadesimple cms made simple. EPSS 46% chance of exploitation in the next 30 days.
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).
Severity
CVSS 3.0
6.5 medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
46% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)